How to Report Phishing Forms Hosted on Microsoft Forms
Question details
The user needs to know how to effectively report multiple fraudulent or phishing forms hosted on Microsoft Forms (forms.office.com) that request sensitive information, particularly when standard reporting methods have failed to get them removed.
- Product
- Microsoft Forms
- Device & OS
- not provided
- Scenario
- Encountering malicious Microsoft Forms links asking for sensitive data and needing a higher-level reporting channel to take them down.
- Observed behavior
- Fraudulent forms remain active and accessible even after being reported through standard Microsoft abuse-reporting processes.
Do not fill out any sensitive information on the suspicious forms. Gather the exact URLs of the phishing forms and take screenshots of the requested information to use as evidence before submitting your report.
Submit a Report via the Microsoft Scam-Reporting Page
If standard abuse reports do not result in the removal of the phishing forms, use Microsoft's dedicated scam-reporting portal for a more thorough investigation.
When dealing with persistent phishing links or large batches of malicious forms, standard in-form reporting might not be addressed immediately. Escalating the issue through Microsoft's official scam-reporting page ensures it reaches the appropriate security team for review.
Open your web browser and navigate to the official Microsoft scam reporting page at https://www.microsoft.com/en-us/concern/scam.
Fill out the required fields in the submission form. Include the specific forms.office.com URLs that are hosting the phishing content.
Upload screenshots of the fraudulent forms and provide a detailed explanation of the sensitive information being requested, as well as any clear evidence of impersonation.
Click the submit button to send your report directly to the Microsoft security and fraud prevention team.
Use the Standard Report Abuse Feature in Microsoft Forms
Utilize the built-in reporting button located directly on the suspicious Microsoft Form.
Switch to WPS Office for a Secure, Lightweight Productivity Experience
While resolving third-party phishing links requires working with the host provider, you can ensure your own documents and data are managed securely by switching to WPS Office. It provides a highly compatible, free alternative for all your daily productivity needs.
- 1. Download the installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions to set up the software on your device.
- 3. Open and edit files: Launch WPS Office and immediately start opening, editing, and saving your existing Microsoft Office documents with perfect formatting.
Frequently Asked Questions
How long does it take for Microsoft to remove a reported phishing form?
Microsoft's security team reviews reports manually, which can take anywhere from a few hours to several days depending on the volume of requests and the severity of the threat.
What should I do if I already submitted my information to a phishing form?
Immediately change your passwords for any compromised accounts. If you provided financial information, contact your bank or credit card issuer right away to block potential fraudulent charges.
Can I report multiple forms.office.com phishing links at once?
Yes, when using the Microsoft concern/scam reporting page, you can include multiple URLs in the details section of your submission to ensure all related fraudulent forms are investigated together.
